Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
File:                     69df89b1-6446-4f76-b802-330eeb5819c6.cer (raw, json)
Hash identifier:          LO98Rr37p4RGpJS11MEGmWknFfuiIvl0+qN8W/FfspA=
Subject key identifier:   3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584695289B9F08EEB52E8AB50C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jul 2024 20:50:17 +0000
Certificate not after:    Wed 21 Oct 2026 20:50:17 +0000
Subordinate resources:    AS: 1706
                          IP: 128.196.0.0/16
                          IP: 150.135.0.0/16
                          IP: 192.12.69.0/24
                          IP: 192.12.196.0/24
                          IP: 192.31.28.0/24
                          IP: 192.80.43.0/24
                          IP: 192.82.237.0/24
                          IP: 198.60.121.0 -- 198.60.131.255
                          IP: 198.60.133.0 -- 198.60.191.255
                          IP: 199.104.128.0/18
                          IP: 199.104.208.0 -- 199.104.255.255
                          IP: 204.27.250.0/24
                          IP: 204.43.0.0/16
                          IP: 204.99.0.0/17
                          IP: 204.228.0.0/18
                          IP: 204.229.192.0/18
                          IP: 206.207.1.0 -- 206.207.49.255
                          IP: 206.207.51.0 -- 206.207.63.255
                          IP: 206.207.128.0/17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:95:28:9b:9f:08:ee:b5:2e:8a:b5:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 18 20:50:17 2024 GMT
            Not After : Oct 21 20:50:17 2026 GMT
        Subject: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b0:26:65:15:f7:00:8f:11:d6:14:dd:07:79:
                    ab:44:33:b0:5e:c9:d8:0b:7c:f2:6c:27:0f:da:6c:
                    b7:2e:9b:7a:dd:30:29:2f:c3:31:58:c9:fd:e0:ff:
                    0d:29:46:82:35:89:47:d0:85:21:67:dd:28:3a:60:
                    a5:53:61:42:37:a2:8b:70:8d:3f:7c:4a:c7:b8:ec:
                    b1:64:b3:a3:c3:29:86:e8:c7:2c:ae:f9:5d:88:31:
                    f7:7a:7c:05:1a:18:60:35:7d:57:2f:66:8a:5b:1d:
                    5f:15:6e:1d:7e:b0:5c:bb:c0:b9:74:b6:dc:b7:87:
                    cf:6b:26:40:e3:73:41:a4:50:3f:12:e8:1b:e0:68:
                    27:24:ff:1f:fd:be:29:cf:ca:ce:e2:39:92:3f:97:
                    20:bd:29:e2:34:bc:6e:3f:47:88:f0:c6:4a:99:4d:
                    31:c8:79:af:4e:8f:cc:28:dd:8f:b5:dc:9e:47:67:
                    2c:a2:78:c6:e8:2f:11:00:56:e7:71:7f:ad:4e:dc:
                    fe:7e:a0:8a:97:85:70:05:6e:49:84:16:b2:77:c7:
                    87:f7:3c:d4:bf:b6:1e:8f:d2:1b:01:3b:2d:27:3a:
                    e0:5a:f1:74:1a:38:2f:30:b2:da:6e:e2:66:70:d7:
                    5f:6c:24:20:4d:bb:ba:78:d8:13:02:fa:69:66:c6:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.196.0.0/16
                  150.135.0.0/16
                  192.12.69.0/24
                  192.12.196.0/24
                  192.31.28.0/24
                  192.80.43.0/24
                  192.82.237.0/24
                  198.60.121.0-198.60.131.255
                  198.60.133.0-198.60.191.255
                  199.104.128.0/18
                  199.104.208.0-199.104.255.255
                  204.27.250.0/24
                  204.43.0.0/16
                  204.99.0.0/17
                  204.228.0.0/18
                  204.229.192.0/18
                  206.207.1.0-206.207.49.255
                  206.207.51.0-206.207.63.255
                  206.207.128.0/17

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1706

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b6:39:ee:b9:74:c1:25:a1:83:44:45:02:e1:05:65:32:b4:
         13:83:4f:31:de:cb:fb:bc:a3:57:fe:bd:b5:a7:c7:85:c8:4a:
         35:e2:d6:42:37:ea:5a:9b:e2:7a:69:51:7c:78:cc:35:8d:ec:
         86:7a:d6:18:b0:e2:2b:08:54:0e:a4:2f:57:37:e9:fd:ca:41:
         66:f0:25:b8:c3:ab:66:49:80:ab:b2:3c:7f:ce:cf:37:53:a5:
         61:9c:2e:6c:30:8c:5e:19:43:10:07:02:55:17:ab:d3:d1:7b:
         f4:9d:9e:74:95:e6:04:25:6d:e5:ed:40:19:f2:78:22:ac:bc:
         6e:4f:15:6d:72:37:6a:df:54:c7:09:ec:47:24:ae:b8:a3:46:
         ec:44:d6:6b:8b:24:50:ac:68:0f:4b:b1:93:47:90:73:1a:db:
         5b:78:d0:49:67:bf:b8:4b:34:42:f6:22:ce:f8:e6:7e:e8:b5:
         b5:b7:d5:96:45:5f:b5:f2:a1:9b:50:04:e7:a2:e9:c3:3f:16:
         3d:42:22:d2:49:55:84:49:97:f7:5d:bc:f3:b8:29:32:be:59:
         c1:d0:d5:75:54:a1:2c:fc:4a:79:a3:4f:1a:e4:e8:a8:1f:2d:
         f7:dc:a9:c5:86:aa:d7:27:57:07:96:c5:a8:5b:19:16:28:1d:
         e7:1e:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:38 2024 by rpki-client on console-fra.rpki-client.org